I have a master/replica set up with OS X Server (10.4.8). The master and replica serve as PDC and BDC for our Windows XP machines as well. Everything has worked really well, except that I can’t force Windows users to change their passwords at next login. If I set an account to change password at next login, the user is prompted to change passwords, they do, Windows says everything’s good to go, and then WHAM! They’re asked to change their password again. And again. And again. It just loops.
Here’s a rundown of what I’ve found:
1. The password does indeed change on the servers.
2. The “Password must be changed at next login” setting is cleared on the Master/PDC, but not on the Replica/BDC. If I clear the check on the Replica/BDC, the user can login fine.
3. I can’t force the setting to replicate manually.
Anyone have any ideas? I’ve talked to Apple, but they won’t touch it because it’s dealing with a Windows client.
It’s mostly an annoyance, but I would love to have this working.